Does anyone have ideas on how to handle push notifications for encrypted or access-controlled notes? The problem is that it seems to me the push notification server is going to need access to the user's signer in order to sign relay AUTH messages and decrypt DMs (if they want to show DM content in the notification).
On my email notifications server (https://github.com/coracle-social/anchor), I'm allowing the user to optionally send along a NIP 46 session so that I can sign AUTH messages, but for obvious reasons this makes me nervous.
I am aware of 0xchat's spec for push notifications (https://github.com/0xchat-app/0xchat-core/blob/main/doc/nofitications.md), but it seems like closed groups and NIP 17 group chat support is limited.
nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqelpt5w nostr:nprofile1qqs84k6jpsav0jmdeqjn2zxlpnsajaw6f8l0m2d4e9t8gjsyn53s4nszu5e7v is this something you guys have solved?
I haven’t solved this problem yet. Right now, the push notifications sent to clients are just something like: “You received a private message.”
I do have a potential solution in mind: the push notification could include the eventid. Then, once the client receives the notification, it could activate for a short period of time to fetch the event, decrypt it, and display the actual content to the user.
However, I haven’t implemented this approach yet — it still needs to be tested and verified.
I did this in Planetary.social and it worked most of the time. Both Android and iOS have “silent” notifications that give you some background execution time.
